‼ CVE-2022-3267 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) in GitHub repository ikus060/rdiffweb prior to 2.4.6.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-3268 ‼
📖 Read
via "National Vulnerability Database".
Weak Password Requirements in GitHub repository ikus060/minarca prior to 4.2.2.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-3256 ‼
📖 Read
via "National Vulnerability Database".
Use After Free in GitHub repository vim/vim prior to 9.0.0530.📖 Read
via "National Vulnerability Database".
🗓️ Tarfile path traversal bug from 2007 still present in 350k open source repos 🗓️
📖 Read
via "The Daily Swig".
Warning added to Python documentation was deemed preferable to a patch📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Tarfile path traversal bug from 2007 still present in 350k open source repos
Warning added to Python documentation was deemed preferable to a patch
‼ CVE-2022-40446 ‼
📖 Read
via "National Vulnerability Database".
ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the component /admin/sendmailto.php?tomail=&groupid=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40443 ‼
📖 Read
via "National Vulnerability Database".
An absolute path traversal vulnerability in ZZCMS 2022 allows attackers to obtain sensitive information via a crafted GET request sent to /one/siteinfo.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40447 ‼
📖 Read
via "National Vulnerability Database".
ZZCMS 2022 was discovered to contain a SQL injection vulnerability via the keyword parameter at /admin/baojia_list.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40146 ‼
📖 Read
via "National Vulnerability Database".
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to access files using a Jar url. This issue affects Apache XML Graphics Batik 1.14.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38398 ‼
📖 Read
via "National Vulnerability Database".
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to load a url thru the jar protocol. This issue affects Apache XML Graphics Batik 1.14.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40444 ‼
📖 Read
via "National Vulnerability Database".
ZZCMS 2022 was discovered to contain a full path disclosure vulnerability via the page /admin/index.PHP? _server.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1941 ‼
📖 Read
via "National Vulnerability Database".
A parsing vulnerability for the MessageSet type in the ProtocolBuffers versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 3.21.5 for protobuf-cpp, and versions prior to and including 3.16.1, 3.17.3, 3.18.2, 3.19.4, 3.20.1 and 4.21.5 for protobuf-python can lead to out of memory failures. A specially crafted message with multiple key-value per elements creates parsing issues, and can lead to a Denial of Service against services receiving unsanitized input. We recommend upgrading to versions 3.18.3, 3.19.5, 3.20.2, 3.21.6 for protobuf-cpp and 3.18.3, 3.19.5, 3.20.2, 4.21.6 for protobuf-python. Versions for 3.16 and 3.17 are no longer updated.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-38648 ‼
📖 Read
via "National Vulnerability Database".
Server-Side Request Forgery (SSRF) vulnerability in Batik of Apache XML Graphics allows an attacker to fetch external resources. This issue affects Apache XML Graphics Batik 1.14.📖 Read
via "National Vulnerability Database".
⚠ S3 Ep101: Uber and LastPass breaches – is 2FA all it’s cracked up to be? [Audio + Text] ⚠
📖 Read
via "Naked Security".
Latest episode - listen now! Learn why adopting 2FA isn't a reason to relax your other security precautions...📖 Read
via "Naked Security".
Naked Security
S3 Ep101: Uber and LastPass breaches – is 2FA all it’s cracked up to be? [Audio + Text]
Latest episode – listen now! Learn why adopting 2FA isn’t a reason to relax your other security precautions…
🔏 Digital Guardian Named A Top Data Loss Prevention Solution by Expert Insights 🔏
📖 Read
via "".
An independent editorial team and technical analysts praised Digital Guardian's quick deployment, on-demand scalability, and full visibility into data.📖 Read
via "".
‼ CVE-2022-35037 ‼
📖 Read
via "National Vulnerability Database".
OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6adb1e.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35029 ‼
📖 Read
via "National Vulnerability Database".
OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6babea.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35032 ‼
📖 Read
via "National Vulnerability Database".
OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35024 ‼
📖 Read
via "National Vulnerability Database".
OTFCC commit 617837b was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-40934 ‼
📖 Read
via "National Vulnerability Database".
Online Pet Shop We App v1.0 is vulnerable to SQL injection via /pet_shop/classes/Master.php?f=delete_sub_category,id📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35021 ‼
📖 Read
via "National Vulnerability Database".
OTFCC commit 617837b was discovered to contain a global buffer overflow via /release-x64/otfccdump+0x718693.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-35035 ‼
📖 Read
via "National Vulnerability Database".
OTFCC commit 617837b was discovered to contain a heap buffer overflow via /release-x64/otfccdump+0x6b559f.📖 Read
via "National Vulnerability Database".